Jonathan LeBlancTechnology Evangelist

Yahoo! Developer NetworkTwitter: @jcleblanc

Yahoo!, Facebook and Social Aggregation

What We’re Talking About

• How do we authorize users and applications on our social platform?

• What’s our main data discovery system?

• How do we secure our platform?

• How do you promote through notifications?

What We’re Talking About

• How do we authorize users and applications on our social platform?

• What’s our main data discovery system?

• How do we secure our platform?

• How do you promote through notifications?

Open ID – Single Account Sign-in Authentication

OAuth - Open Authorization

OAuth – What Does the End-User See?

OAuth – What Does the End-User See?

Hybrid Authentication – OpenID + OAuth

What We’re Talking About

• How do we authorize users and applications on our social platform?

• What’s our main data discovery system?

• How do we secure our platform?

• How do you promote through notifications?

Querying Languages – Yahoo! Query Language (YQL)

The Yahoo! Query Language Test Consolehttp://developer.yahoo.com/yql/console

Querying Languages

What We’re Talking About

• How do we authorize users and applications on our social platform?

• What’s our main data discovery system?

• How do we secure our platform?

• How do you promote through notifications?

Front-end Security

Front-end Security: IFrames

IFrames - Pros• Quick to set up• Full content control for developers

IFrames - Cons• Drive-by downloads, etc.• No content restrictions

Front-end Security: Caja

Caja - Pros• Very secure model (whitelist)• Aims to protect end-users• Platform has full content control

Caja - Cons• Slow to set up• Difficult to configure• User does not have full

content control

What We’re Talking About

• How do we authorize users and applications on our social platform?

• What’s our main data discovery system?

• How do we secure our platform?

• How do you promote through notifications?

The Update Stream

Updates Reach through Relationships

OpenSocial – Simple Standardized API Abstraction

Main Uses:User Profile Data

Relationship Data

Activity Streams

Messaging

AJAX & Tool Abstraction

Data Pipelining

Templating

• Social Endpoint Abstraction

• Open Source Project

• Standardizing Social

• Large number of containers

• Portable

Containers include: YAP,

MySpace, iGoogle, Hi5, Orkut,

LinkedIn, Friendster, etc.

OpenSocial – JavaScript Based API Abstraction

Capture user activitiesosapi.activities.get()

Create new activitiesosapi.activities.create()

The Yahoo! Updates Firehose

Filters:Text Query

Specific Website

Specific Source

Geographic Location

User

Language

Date

• Real time search of all updates

• Ratings, reviews, Flickr, etc.

• YQL driven API

• Search links (e.g. facebook.com)

• Search sources (e.g. Mafia Wars)

SELECT * FROM

social.updates.search WHERE

link="www.facebook.com”

Conclusion

• YAP is built on the open stack

• We use YQL to aggregate external data

• Firehose allows easy consumption of Updates

$10,000 X AwardBest Yahoo! / Paypal Integration

http://developer.yahoo.com

Questions?

http://www.slideshare.net/jcleblanc/yahoo-open-platform-stack

http://www.slideshare.net/weberik/yahoo-facebookintegration-4808640